FYI https://github.com/seancorfield/next-jdbc/releases/tag/v1.2.761 -- minor update but includes checks in the SQL builder code (used by "friendly" SQL functions) to reject column names (keys) containing ; since those could be used to craft a SQL injection attack if you accept user input and use it for map keys in any of the friendly SQL functions. This is the same check HoneySQL already provides.